Google Cloud / Mandiant (GTIG)

https://cloud.google.com/blog/topics/threat-intelligence

Google Threat Intelligence Group; absorbed Mandiant CTI. The /topics/threat-intelligence landing lists titles but NO publication dates (only relative read times). Drill rule: open the top 3-5 posts on the listing and read their date inline rather than treating the dateless landing as empty. RSS at https://cloud.google.com/blog/topics/threat-intelligence/rss is a partial mirror (truncated). (v2.55: rss_url verified — use `python3 tools/fetch_source.py feed https://feeds.feedburner.com/threatintelligence/pvexyqv7v0v [N]`) | 2026-06-20 full audit (v2.62): live=Y, drill=Y. FETCH → feed https://feeds.feedburner.com/threatintelligence/pvexyqv7v0v 5 (dated listing) then webfetch the per-article cloud.google.com URL for the body; the HTML landing also works for titles but carries no dates. AVOID: The /topics/threat-intelligence HTML landing has titles but NO publication dates (only relative read-times) — use the feedburner RSS for dates rather than treating the dateless landing as the index. The cloud.google.com/.../rss mirror is truncated..